Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <b124027ba0fb6dde3e187eab0fff6914@smtp.hushmail.com>
Date: Sat, 16 Feb 2013 19:51:41 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: AIX password hashes


On 16 Feb, 2013, at 14:31 , Claudio André <claudioandre.br@...il.com> wrote:

> Em 16-02-2013 00:12, magnum escreveu:
>> I think we're looking at the simplest algorithm you can imagine (iterate 2^N over pass.salt) and the only real obstacle is the encoding. I can't imagine any more test that would help. The {smd5} timings are curious though. I think they indicate it could be pretty much like normal crypt MD5.
>> 
>> magnum
> 
> Silly question. Is just a (bad) name coincidence here?
> 
> http://wiki.dovecot.org/Authentication/PasswordSchemes
> http://dovecot.org/pipermail/dovecot-cvs/2010-February/016287.html
> http://blog.gauner.org/blog/2010/12/19/handling-salted-passwords-in-perl/
> 
> Claudio

It's not the exact same thing as LDAP use normal base64. However, there is a parameter for getting AIX to use "standard encoding" whatever that could mean. I would not be surprised if that would end up exactly like that stuff.

magnum
Content of type "text/html" skipped

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.